End User License Agreement

Part 1 – General Terms

This End User License Agreement ("Agreement", "Terms", or "EULA") is entered into between PT Global Inovasi Siber Indonesia, the owner and operator of DarkRadar ("DarkRadar", "Company", "we", "our", or "us"), and the individual or legal entity accessing or using the Services ("Customer", "User", or "you").

By registering an account, subscribing to, accessing, or using any DarkRadar service, website, software, API, or platform, you acknowledge that you have read, understood, and agree to be legally bound by this Agreement and our Privacy Policy.

If you do not agree with these Terms, you must not access or use the Services.

1. Definitions

For purposes of this Agreement:

Account means a registered user account created to access the Services.

Affiliate means any entity controlling, controlled by, or under common control with a party.

API means any application programming interface provided by DarkRadar.

Authorized User means an employee, contractor, consultant, or representative authorized by Customer to access the Services.

Company means PT Global Inovasi Siber Indonesia.

Customer means the organization or individual purchasing or using the Services.

Documentation means manuals, online documentation, user guides, knowledge bases, and technical documentation provided by the Company.

Intellectual Property Rights means copyrights, patents, trademarks, trade secrets, database rights, know-how, and other proprietary rights.

Platform means DarkRadar's web applications, APIs, dashboards, databases, software, infrastructure, and related services.

Service means any feature, software, dashboard, API, intelligence feed, monitoring capability, or functionality offered by DarkRadar.

Threat Intelligence means cybersecurity information, indicators, metadata, references, technical analysis, risk scoring, exposure intelligence, and other defensive cybersecurity information derived from lawful or licensed sources.

2. Eligibility

You represent and warrant that:

You are at least eighteen (18) years old or have legal authority to enter into this Agreement.
You have full legal authority to bind your organization if using the Services on behalf of an entity.
Your use of the Services complies with all applicable laws and regulations.
You are not prohibited from receiving the Services under applicable export control or sanctions laws.

DarkRadar reserves the right to refuse or terminate access if these representations become inaccurate.

3. Scope of Services

DarkRadar provides cybersecurity and digital risk intelligence services intended to assist organizations in identifying, monitoring, investigating, and responding to cyber threats.

Services may include, but are not limited to:

Digital Risk Intelligence
Cyber Threat Intelligence
External Attack Surface Monitoring
Brand Monitoring
Credential Exposure Monitoring
Malware Intelligence
Infrastructure Intelligence
Domain Intelligence
IP Intelligence
Threat Actor Intelligence
Vulnerability Intelligence
Data Exposure Monitoring
Executive Monitoring
Intelligence Dashboards
Investigation Tools
API Services

Features available depend on the Customer's subscription plan.

DarkRadar may modify, improve, replace, discontinue, or introduce features at its discretion.

4. License Grant

Subject to this Agreement and payment of applicable subscription fees, DarkRadar grants Customer a limited, revocable, non-exclusive, non-transferable, non-sublicensable license to access and use the Services solely for Customer's internal cybersecurity and defensive security operations.

No ownership rights are transferred.

All rights not expressly granted remain the exclusive property of DarkRadar.

5. Subscription

Certain Services require an active subscription.

Subscription plans may include:

Community
Professional
Enterprise
Managed Intelligence
Custom Licensing

Subscription terms, pricing, usage limits, and included features are described in applicable quotations, invoices, order forms, or subscription plans.

Unless otherwise agreed in writing:

subscriptions are non-refundable;
unused portions are not refundable;
subscriptions automatically expire at the end of the subscription term unless renewed.

6. Account Registration

To access certain Services, you must create an Account.

You agree to:

provide accurate information;
maintain current information;
keep credentials confidential;
protect API keys;
notify DarkRadar immediately of unauthorized access;
ensure Authorized Users comply with this Agreement.

You remain responsible for all activities performed under your Account.

DarkRadar is not liable for losses resulting from compromised credentials caused by Customer negligence.

7. Authorized Users

Customer may authorize employees or contractors to use the Services.

Customer is responsible for:

managing user permissions;
removing inactive users;
ensuring compliance with these Terms;
preventing unauthorized sharing of accounts.

Shared accounts are prohibited unless explicitly permitted under the applicable subscription.

8. Acceptable Use

Customer agrees to use the Services solely for legitimate cybersecurity, defensive security, fraud prevention, compliance, risk management, security research, incident response, or other lawful purposes.

Customer shall NOT use the Services to:

violate any applicable law;
conduct unauthorized access;
facilitate hacking activities;
conduct credential stuffing;
perform brute-force attacks;
engage in phishing;
distribute malware;
facilitate ransomware operations;
engage in identity theft;
engage in extortion;
perform unauthorized surveillance;
harass individuals;
stalk individuals;
dox individuals;
sell exposed credentials;
redistribute intelligence without authorization;
exploit vulnerabilities against systems without authorization;
interfere with the Platform;
abuse APIs;
overload infrastructure;
bypass rate limits;
circumvent authentication;
scrape the Platform without permission;
create competing services using DarkRadar data.

Violation of this section may result in immediate suspension or termination.

9. Customer Responsibilities

Customer agrees to:

maintain adequate internal security controls;
secure login credentials;
verify findings before taking action;
comply with applicable privacy laws;
ensure authorized investigations;
protect exported intelligence;
train Authorized Users appropriately.

Customer remains solely responsible for decisions made based on intelligence provided through the Platform.

10. Export Restrictions

Customer shall not export, re-export, transfer, or make available the Services in violation of applicable export control laws, sanctions regulations, or trade restrictions

Customer represents that neither Customer nor any Authorized User appears on any applicable sanctions or restricted party list.

11. Intellectual Property

All software, algorithms, databases, documentation, dashboards, interfaces, trademarks, logos, reports, methodologies, source code, designs, workflows, machine learning models, scoring systems, and other intellectual property associated with DarkRadar remain the exclusive property of PT Global Inovasi Siber Indonesia or its licensors.

Nothing contained in this Agreement transfers ownership of any intellectual property to Customer.

Customer shall not:

copy
reproduce
modify
reverse engineer
decompile
disassemble
create derivative works
sublicense
lease
sell
redistribute
publish
mirror
scrape
commercially exploit any part of the Platform except as expressly permitted by written agreement.

12. Changes to the Services

DarkRadar may:

improve functionality
introduce new features
remove obsolete functionality
perform maintenance
apply security patches
modify APIs
update dashboards
revise Documentation

Reasonable efforts will be made to minimize disruption.

DarkRadar does not guarantee that any particular feature will remain permanently available.

13. Changes to these Terms

DarkRadar may revise this Agreement from time to time.

Material changes will become effective upon publication on the official website or upon written notice to Customers.

Continued use of the Services after the effective date constitutes acceptance of the revised Terms.

If Customer does not agree with the revised Terms, Customer must discontinue use of the Services.

14. Contact Information

Questions regarding this Agreement may be directed to:

PT Global Inovasi Siber Indonesia

Website: https://www.darkradar.io

Email: [email protected]

Part 2 – Threat Intelligence, Third-Party Data, API Usage, Confidentiality & Data Processing

15. Threat Intelligence Sources

DarkRadar provides cybersecurity intelligence intended exclusively for defensive security, cyber risk management, incident response, threat hunting, fraud prevention, vulnerability management, compliance, and other legitimate cybersecurity purposes.

Threat Intelligence available through the Services may originate from one or more of the following sources:

Open Source Intelligence (OSINT)
Public Internet resources
Surface Web
Security research
Commercial intelligence providers
Licensed intelligence providers
Customer-contributed intelligence
Internet-wide scanning
Certificate Transparency logs
Passive DNS
Malware analysis
Infrastructure telemetry
Security advisories
Government advisories
Public vulnerability databases
Publicly reported cyber incidents
Lawfully available cyber exposure information
Other lawful intelligence sources.

DarkRadar continuously aggregates, correlates, enriches, and analyzes intelligence from multiple sources to improve cyber risk visibility.

DarkRadar does not represent that every source is complete, continuously available, or error-free.

16. Third-Party Intelligence Providers

Certain information displayed by the Services may originate from independent third-party providers.

Such providers may include commercial intelligence vendors, cybersecurity researchers, public repositories, infrastructure providers, or other licensed intelligence sources.

DarkRadar does not own third-party content unless expressly identified.

Ownership of third-party intellectual property remains with the respective owners.

Customer acknowledges that availability of certain intelligence may depend upon third-party services beyond DarkRadar's reasonable control.

If a third-party provider withdraws, modifies, suspends, or restricts access to its information, DarkRadar may modify or discontinue related features without liability.

17. Exposure Intelligence

DarkRadar may provide information relating to digital exposure, compromised infrastructure, leaked assets, publicly reported security incidents, exposed credentials, malware activity, phishing campaigns, infrastructure abuse, or other cyber risk indicators.

Such information is intended solely to assist Customers in identifying, assessing, prioritizing, and mitigating cybersecurity risks.

DarkRadar does not encourage, facilitate, authorize, or promote unauthorized access to systems, misuse of exposed information, or unlawful activity.

18. Breach Intelligence Disclaimer

DarkRadar provides cyber exposure intelligence for defensive cybersecurity purposes only.

Where available, information relating to data exposure, credential exposure, or publicly reported breach events is presented solely to assist Customers in assessing cybersecurity risks affecting their own organizations, assets, users, suppliers, or authorized environments.

DarkRadar does not claim ownership of any third-party data relating to cyber incidents or exposure events.

DarkRadar does not represent that any exposed information was lawfully obtained by the original source from which such information may have become publicly available.

DarkRadar does not verify every underlying data source independently.

Customers are solely responsible for determining whether any action taken based upon such intelligence complies with applicable laws, contractual obligations, internal policies, and regulatory requirements.

DarkRadar does not provide access for the purpose of identity theft, unauthorized credential use, account compromise, fraud, extortion, harassment, or any unlawful activity.

19. No Ownership of Third-Party Data

Nothing within the Services shall be interpreted as transferring ownership of any third-party information to Customer.

Access to intelligence does not create any ownership rights.

DarkRadar grants only a limited right to access intelligence through the Platform during the active subscription period.

20. Intelligence Accuracy

Cyber Threat Intelligence is inherently dynamic.

Threat actors continuously modify infrastructure, malware, phishing campaigns, domains, IP addresses, credentials, tactics, techniques, and procedures.

Accordingly:

information may become outdated;
information may later be corrected;
information may contain inaccuracies;
false positives may occur;
false negatives may occur;
some intelligence may become unavailable;
enrichment results may differ over time.

Customer agrees that all intelligence should be independently evaluated before making operational, legal, financial, or business decisions.

DarkRadar makes no warranty regarding completeness, accuracy, timeliness, or suitability of any intelligence.

21. Customer Verification Responsibility

Customer remains responsible for independently validating intelligence before:

notifying customers;
contacting regulators;
initiating incident response;
attributing cyber attacks;
commencing legal proceedings;
reporting public disclosures;
taking disciplinary action;
blocking infrastructure;
publishing findings.

DarkRadar is an intelligence platform and does not replace professional investigation, forensic analysis, legal advice, or incident response.

22. API Access

Certain subscription plans include API access.

API usage remains subject to:

subscription limits;
rate limits;
authentication requirements;
fair use policies;
technical documentation.

DarkRadar may modify API endpoints, authentication methods, schemas, or functionality from time to time.

Reasonable efforts will be made to provide advance notice of material API changes.

23. API Restrictions

Customer shall not:

exceed rate limits;
bypass authentication;
share API credentials;
create excessive automated requests;
attempt denial-of-service attacks;
scrape unavailable endpoints;
reverse engineer APIs;
create competing databases;
redistribute API responses without authorization;
resell API access;
provide API access to unauthorized third parties.

DarkRadar may suspend API access immediately upon detecting abuse.

24. Exported Intelligence

Where export functionality is available, exported reports remain subject to this Agreement.

Customer shall implement reasonable administrative, technical, and organizational safeguards to protect exported intelligence.

Customer is solely responsible for any redistribution of exported reports.

25. Confidentiality

Both parties agree to maintain the confidentiality of Confidential Information disclosed during the relationship.

Confidential Information includes non-public:

technical information;
pricing;
security architecture;
software;
documentation;
source code;
product roadmap;
vulnerability information;
customer information;
business information.

Confidential Information does not include information that:

becomes publicly available without breach;
is independently developed;
is lawfully obtained from another source;
must be disclosed under applicable law.

Confidentiality obligations survive termination for five (5) years unless otherwise required by law.

26. Customer Data

Customer retains ownership of all Customer Data submitted to the Platform.

DarkRadar receives only those rights reasonably necessary to:

host the Services;
process Customer requests;
provide requested functionality;
improve service reliability;
provide technical support;
maintain security.

DarkRadar shall not sell Customer Data.

27. Data Processing

DarkRadar processes Customer Data only for legitimate business purposes including:

authentication;
account management;
subscription administration;
security monitoring;
fraud prevention;
technical support;
service improvement;
legal compliance.

Processing activities are governed by the Privacy Policy.

28. Security Measures

DarkRadar maintains reasonable administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of Customer Data.

Such safeguards may include:

encryption in transit;
encryption at rest;
access controls;
audit logging;
security monitoring;
vulnerability management;
incident response procedures.

No information system can be guaranteed to be completely secure.

29. Customer Security Responsibilities

Customer is responsible for:

securing endpoints;
protecting credentials;
implementing MFA where available;
maintaining endpoint security;
securing exported intelligence;
controlling internal user permissions;
promptly removing inactive users.

DarkRadar shall not be responsible for losses resulting from Customer's failure to implement reasonable security practices.

30. Data Retention

DarkRadar may retain operational logs, authentication records, audit logs, support communications, billing records, and security logs for periods reasonably necessary to:

maintain the Services;
investigate abuse;
comply with legal obligations;
resolve disputes;
enforce this Agreement.

Retention periods may vary depending on applicable law and operational requirements.

31. Privacy Policy

Customer acknowledges that personal information processed through the Services is governed by the DarkRadar Privacy Policy.

The Privacy Policy forms an integral part of this Agreement.

In the event of conflict between this Agreement and the Privacy Policy regarding processing of personal data, the Privacy Policy shall prevail with respect to personal data processing.

Part 3 – Warranties, Liability, Suspension, Termination & Legal Provisions

32. Disclaimer of Warranties

THE SERVICES ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, DARKRADAR DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING BUT NOT LIMITED TO:

MERCHANTABILITY;
FITNESS FOR A PARTICULAR PURPOSE;
TITLE;
NON-INFRINGEMENT;
ACCURACY;
COMPLETENESS;
AVAILABILITY;
RELIABILITY;
SECURITY;
PERFORMANCE.

DarkRadar does not warrant that:

the Services will operate uninterrupted;
the Services will be error-free;
vulnerabilities will always be detected;
all cyber threats will be identified;
intelligence will always be accurate;
information will always be current;
APIs will always remain unchanged;
third-party services will remain available.

Cybersecurity is an evolving field. No technology can guarantee complete detection, prevention, attribution, or protection against all cyber threats.

33. No Professional Advice

The Services do not constitute:

legal advice;
regulatory advice;
compliance certification;
forensic conclusions;
security certification;
insurance advice;
investment advice;
attribution confirmation.

Customers remain solely responsible for decisions based upon information obtained through the Services.

Professional legal, technical, forensic, or regulatory advice should be obtained where appropriate.

34. Customer Decisions

DarkRadar provides cybersecurity intelligence to assist Customers.

DarkRadar does not make decisions on behalf of Customers.

Customers remain solely responsible for:

incident response;
vulnerability remediation;
public disclosure;
customer notification;
regulator notification;
law enforcement reporting;
attribution decisions;
risk acceptance;
operational decisions.

35. Third-Party Services

The Services may integrate with or reference third-party products, APIs, cloud providers, security vendors, identity providers, communication services, infrastructure providers, or intelligence providers.

DarkRadar:

does not own such services;
does not guarantee their availability;
is not responsible for their actions;
may discontinue integrations without liability where required by the third-party provider.

Use of third-party services remains subject to the applicable third-party terms.

36. Service Availability

DarkRadar will use commercially reasonable efforts to maintain service availability.

However, temporary interruptions may occur due to:

maintenance;
upgrades;
emergency security patches;
denial-of-service attacks;
internet failures;
cloud provider outages;
telecommunications failures;
force majeure events.

Temporary interruptions do not constitute breach of this Agreement.

37. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, DARKRADAR SHALL NOT BE LIABLE FOR ANY:

indirect damages;
incidental damages;
consequential damages;
exemplary damages;
punitive damages;
special damages;
loss of profits;
loss of goodwill;
business interruption;
data loss;
loss of anticipated savings;
reputational damage.

WHETHER ARISING FROM CONTRACT, NEGLIGENCE, TORT, STRICT LIABILITY, OR OTHERWISE.

38. Liability Cap

Except for liability that cannot legally be excluded, DarkRadar's total aggregate liability arising from this Agreement shall not exceed the total subscription fees actually paid by Customer during the twelve (12) months immediately preceding the event giving rise to the claim.

39. Customer Indemnification

Customer agrees to defend, indemnify, and hold harmless DarkRadar, its affiliates, directors, officers, employees, contractors, licensors, and partners from any claim, demand, liability, loss, damage, cost, or expense (including reasonable legal fees) arising out of:

Customer's misuse of the Services;
violation of this Agreement;
unlawful use of intelligence;
infringement of third-party rights caused by Customer;
unauthorized access performed by Customer;
Customer's violation of applicable laws.

40. Suspension

DarkRadar may immediately suspend all or part of the Services where it reasonably believes:

Customer has violated this Agreement;
Customer poses a security risk;
Customer is conducting unlawful activities;
payment obligations remain outstanding;
Customer is abusing API resources;
Customer is attempting unauthorized access;
suspension is required by law.

Where reasonably practicable, DarkRadar will notify Customer before suspension.

41. Termination

Either party may terminate this Agreement:

upon expiration of the subscription;
by written agreement;
for material breach not cured within thirty (30) days;
where required by law.

DarkRadar may terminate immediately where:

illegal activity is detected;
sanctions prohibit continued service;
fraud is identified;
Customer repeatedly violates these Terms.

Termination does not relieve Customer of outstanding payment obligations.

42. Effect of Termination

Upon termination:

Customer's license immediately ends;
API credentials may be revoked;
platform access may be disabled;
subscriptions terminate;
confidential information shall remain protected;
payment obligations accrued prior to termination survive.

DarkRadar may retain operational records where required by law or legitimate business purposes.

43. Force Majeure

DarkRadar shall not be liable for delays or failures resulting from causes beyond its reasonable control, including:

natural disasters;
war;
terrorism;
civil unrest;
labor disputes;
governmental actions;
sanctions;
internet outages;
cloud failures;
power failures;
cyber attacks affecting infrastructure;
pandemic events.

Performance shall resume as soon as reasonably practicable.

44. Export Control & Sanctions

Customer agrees not to use the Services in violation of applicable export control laws, sanctions regulations, embargoes, or trade restrictions.

Customer represents that neither Customer nor its Authorized Users are subject to applicable sanctions that prohibit use of the Services.

DarkRadar may suspend or terminate Services to comply with legal obligations.

45. Compliance with Laws

Customer shall comply with all applicable laws relating to:

cybersecurity;
privacy;
data protection;
anti-corruption;
anti-money laundering;
export controls;
sanctions;
intellectual property.

Nothing in this Agreement authorizes unlawful conduct.

46. Governing Law

This Agreement shall be governed by and construed in accordance with the laws of the Republic of Indonesia, without regard to conflict of law principles.

47. Dispute Resolution

The parties shall first attempt in good faith to resolve disputes through negotiation.

If a dispute cannot be resolved within thirty (30) days, the parties agree to submit the dispute to arbitration in Jakarta, Indonesia, unless otherwise agreed in writing.

The arbitration shall be conducted in the English language.

The arbitral award shall be final and binding.

48. Assignment

Customer may not assign or transfer this Agreement without prior written consent from DarkRadar.

DarkRadar may assign this Agreement in connection with:

corporate restructuring;
merger;
acquisition;
sale of assets;
affiliate transfers.

49. Entire Agreement

This Agreement, together with the Privacy Policy, Order Forms, Subscription Terms, and any written amendments, constitutes the entire agreement between the parties regarding the Services.

It supersedes all prior proposals, negotiations, representations, or agreements relating to the subject matter.

50. Severability

If any provision of this Agreement is determined to be invalid, illegal, or unenforceable, the remaining provisions shall remain in full force and effect.

The invalid provision shall be replaced by a valid provision that most closely reflects the original commercial intent.